Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/yF1UKZXKNTUEMluPN45C-bt-YQs.roa
File: yF1UKZXKNTUEMluPN45C-bt-YQs.roa (raw, json)
Hash identifier: IVkvU2wbaH6kfpkoW5G59fs6ZXqBk4fQASWja9BuHNU=
Subject key identifier: C8:5D:54:29:95:CA:35:35:04:32:5B:8F:37:8E:42:F9:BB:7E:61:0B
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018B28FBF310B547240986485E958F567D9F
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/yF1UKZXKNTUEMluPN45C-bt-YQs.roa
Signing time: Fri 13 Oct 2023 12:21:22 +0000
ROA not before: Fri 13 Oct 2023 12:21:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.12.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:fb:f3:10:b5:47:24:09:86:48:5e:95:8f:56:7d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 13 12:21:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c85d542995ca353504325b8f378e42f9bb7e610b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:63:1f:d2:4e:ee:a2:e7:45:49:88:8c:10:20:
ba:bc:60:96:94:c1:30:29:12:a8:7e:b1:30:fb:68:
7c:5f:f8:db:3e:e5:77:6a:19:25:fc:71:90:ae:e7:
de:43:e2:cb:17:48:a9:1b:10:87:ae:51:5e:ea:9e:
a2:ec:35:c2:0e:d9:61:4e:3a:00:a3:d0:a3:1d:71:
c8:c9:2f:99:3e:76:d7:76:b3:bc:43:ef:8f:d3:83:
c3:24:53:76:99:66:a9:94:1c:4e:ce:98:2b:06:95:
8a:7a:9b:55:a6:1d:8d:06:f8:46:57:e4:ac:8a:58:
c8:d2:61:2c:71:42:e1:86:83:10:37:1f:46:79:e5:
e7:01:ba:19:a0:f6:ff:71:a7:9f:e3:28:fa:d0:9d:
fe:05:11:02:f2:47:60:de:91:fd:2b:f3:47:21:6c:
a8:de:1d:51:63:ce:55:96:ce:44:ca:46:7c:97:d0:
26:9b:e2:58:03:fb:04:e3:74:9d:2d:6a:68:b2:67:
86:df:12:1f:e4:ff:2e:e9:52:d2:5d:e5:79:de:6a:
36:a4:9f:91:79:b2:85:8f:ac:4c:10:6d:bb:5d:81:
3c:88:29:12:f0:0b:23:de:ce:24:d7:01:99:06:25:
ad:63:ad:24:c5:f3:2c:a6:8f:fc:04:0c:04:2d:a0:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5D:54:29:95:CA:35:35:04:32:5B:8F:37:8E:42:F9:BB:7E:61:0B
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/yF1UKZXKNTUEMluPN45C-bt-YQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/23
91.228.15.0/24
94.154.32.0/22
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
41:43:17:a5:a7:f5:24:64:6d:89:48:77:b4:d4:09:04:17:8f:
09:e8:56:11:83:0f:40:1a:2f:3d:60:31:79:1e:46:d2:93:ce:
73:50:27:2f:46:b2:ee:74:35:50:b1:8b:08:9a:a4:58:3a:e5:
ed:64:92:7a:d5:7a:8b:28:c0:1b:bb:30:17:0a:f4:60:c9:25:
86:94:19:6a:e0:8a:1b:16:a1:20:28:2d:14:38:09:c0:b7:e6:
d5:89:e1:94:81:50:ae:57:e4:a2:4b:2a:ba:f8:3d:eb:22:87:
7c:10:d6:86:00:90:68:6a:95:87:ba:e2:57:83:d0:4c:66:0b:
a2:e1:79:c9:01:c5:3c:92:45:31:b6:82:88:af:4a:d9:55:ce:
1d:7d:c3:0b:60:34:16:35:10:a8:ba:90:2c:23:15:be:2d:ac:
fc:1c:b8:23:ee:2e:d7:43:a7:c8:92:9f:59:26:66:0b:2e:ee:
47:63:d2:72:88:d9:1f:55:a6:54:f8:17:64:8f:de:dc:c9:20:
2d:0e:98:82:17:38:09:65:0a:31:47:ec:b1:8d:1b:9d:c6:41:
5a:f6:0c:0e:c6:17:b2:7c:ec:ff:12:29:bb:59:67:90:a3:9c:
1d:78:7f:40:5a:b1:d7:ea:d7:e4:4b:48:a5:ff:82:8c:a1:b2:
e7:da:ee:fc
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 16 19:12:31 2023 by rpki-client on console-fra.rpki-client.org